Help flashing Fenvi wr1800k with tftpd

The1plusguy · June 29, 2024, 5:10pm

Hi everyone,

I'm trying to flash OpenWRT on my Fenvi AX1800 Fenvi ax1800, which currently has custom firmware. I attempted to upgrade through the web interface, but it gives me an "invalid file" error. I haven't been able to find any tutorial videos on this process, and I have no experience with TFTP.

Could someone provide a step-by-step guide to help me out? I followed the instructions on the HAR-20S2U1 page https://openwrt.org/toh/sim/simax1800t using Tftpd64. After flashing the firmware using tftpd64 , the router's lights flash, and then the red light becomes solid, but nothing else happens. The router still has its stock firmware.

I've attached the Tftpd64 log for reference.

Thanks in advance for your help!

The1plusguy · June 30, 2024, 12:19pm

Forgot to mention fenvi generic firmware is pre installed.

frollic · June 30, 2024, 12:46pm

what file was used for the factory.bin ?

The1plusguy · June 30, 2024, 1:04pm

I followed this https://openwrt.org/toh/sim/simax1800t And used this as factory .bin https://downloads.openwrt.org/releases/23.05.3/targets/ramips/mt7621/openwrt-23.05.3-ramips-mt7621-sim_simax1800t-initramfs-factory.bin

I tried all there on that page.

The1plusguy · July 1, 2024, 1:15pm

I tried again but same issue.

frollic · July 1, 2024, 1:19pm

You wrote that it was a custom firmware, does it mean it's different from the one provided by Fenvi?

The1plusguy · July 1, 2024, 1:22pm

No. It original fenvi firmware. Which looks like genetric firmware. (I don’t see fenvi written anywhere in gui)

frollic · July 1, 2024, 1:29pm

since we don't know why your flashes fail, you'll have to get serial port access to the router,

your device is called AX1800WR while the one in the wiki is AX1800T. do you know they're the same ?

The1plusguy · July 1, 2024, 1:30pm

They’re all same . All made by same oem with different brand label on it. Check this discussion https://forum.openwrt.org/t/edup-ep-rt2960-ax1800-strange-openwrt-router

frollic · July 1, 2024, 1:32pm

same how ? hw and sw wise ?
and you know this ?

The1plusguy · July 1, 2024, 1:32pm

See the discussion https://forum.openwrt.org/t/edup-ep-rt2960-ax1800-strange-openwrt-router

frollic · July 1, 2024, 1:34pm

TLDR; I don't see WR mentioned there ?

and please, don't cross post, currently you don't know if it's the same device.

The1plusguy · July 1, 2024, 1:37pm

Sorry I won’t. Check this https://openwrt.org/toh/sim/simax1800t. It says all are same hw but different brands

frollic · July 1, 2024, 1:41pm

again, does it say 1800T == 1800WR ?

if we assume they're the same, you'll still need serial port access.

The1plusguy · July 1, 2024, 2:07pm

I have opened the router to access the serial port

frollic · July 1, 2024, 2:09pm

the bottom left four vertical holes could be the serial console, but you should probably flip the PCB, to make sure.

The1plusguy · July 1, 2024, 2:11pm

It’s a generic board. You’re right they’re serial consol. What should be the next step?

frollic · July 1, 2024, 2:14pm

hook it up to an USB TTL, post the log of when it attempts to load and boot your factory.bin.

The1plusguy · July 1, 2024, 3:03pm

I will have to purchase USB TTl. I will get back to you once i get it.

The1plusguy · July 8, 2024, 7:45pm

I got below log from tll:
U-Boot SPL 2018.09-g6c1f25b (Mar 29 2021 - 10:59:27 +0800)
Trying to boot from NAND

U-Boot 2018.09-g6c1f25b (Mar 29 2021 - 10:59:27 +0800)

CPU: MediaTek MT7621AT ver 1, eco 3
Clocks: CPU: 1100MHz, DDR: 1200MHz, Bus: 275MHz, XTAL: 40MHz
Model: MediaTek MT7621 reference board (NAND)
DRAM: 256 MiB
NAND: 128 MiB
Loading Environment from NAND... OK
In: uartlite0@1e000c00
Out: uartlite0@1e000c00
Err: uartlite0@1e000c00
Net: Factory: using factory mac

NAND read: device 0 offset 0x100000, size 0x20000
131072 bytes read: OK

Warning: eth@1e100000 (eth0) using random MAC address - e6:67:1e:09:d0:93
eth0: eth@1e100000
Hit any key to stop autoboot: 0
gpio: pin 7 (gpio 7) value is 1
gpio: pin 8 (gpio 8) value is 1
gpio: pin 6 (gpio 6) value is 1
gpio: pin 8 (gpio 8) value is 0

*** U-Boot Boot Menu ***

 1. Factory Network Boot
 2. Auto Dual System Boot
 3. Upgrade firmware
 4. Upgrade bootloader
 5. Upgrade bootloader (advanced mode)
 6. Load image
 7. Main system
 8. Boot From Firmware2
 0. U-Boot console

Press UP/DOWN to move, ENTER to select
Factory: go as factory_boot=1

NAND read: device 0 offset 0x100000, size 0x20000
131072 bytes read: OK
Factory: using ipaddr 192.168.1.81
Using eth@1e100000 device
TFTP from server 192.168.1.254; our IP address is 192.168.1.81
Filename 'factory.bin'.
Load address: 0x80010000
Loading: ## Warning: gatewayip needed but not set

Warning: gatewayip needed but not set

#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
##
1.4 MiB/s
done
Bytes transferred = 5747056 (57b170 hex)
Wrong Image Format for bootm command
ERROR: can't get kernel image!

Select Firmware1 to start

Loading from nand0, offset 0x180000
Fit image detected...
FIT description: MIPS OpenWrt FIT (Flattened Image Tree)
Image 0 (kernel@1)
Description: MIPS OpenWrt Linux-4.4.198
Type: Kernel Image
Compression: lzma compressed
Data Start: 0x800100e4
Data Size: 1778037 Bytes = 1.7 MiB
Architecture: MIPS
OS: Linux
Load Address: 0x81001000
Entry Point: 0x81001000
Hash algo: crc32
Hash value: ee918762
Hash algo: sha1
Hash value: 9f662a207692eb5396903f673db8a433a7c28519
Image 1 (fdt@1)
Description: MIPS OpenWrt mt7621-wr1800k-ax-nand device tree blob
Type: Flat Device Tree
Compression: uncompressed
Data Start: 0x801c23a4
Data Size: 11582 Bytes = 11.3 KiB
Architecture: MIPS
Hash algo: crc32
Hash value: e1348a4d
Hash algo: sha1
Hash value: 1545970876c589c4e5952a1acf2cdd0db6c2230a
Default Configuration: 'config@1'
Configuration 0 (config@1)
Description: OpenWrt
Kernel: kernel@1
FDT: fdt@1
Automatic boot of image at addr 0x80010000 ...

Loading kernel from FIT Image at 80010000 ...

Using 'config@1' configuration
Trying 'kernel@1' kernel subimage
Description: MIPS OpenWrt Linux-4.4.198
Type: Kernel Image
Compression: lzma compressed
Data Start: 0x800100e4
Data Size: 1778037 Bytes = 1.7 MiB
Architecture: MIPS
OS: Linux
Load Address: 0x81001000
Entry Point: 0x81001000
Hash algo: crc32
Hash value: ee918762
Hash algo: sha1
Hash value: 9f662a207692eb5396903f673db8a433a7c28519
Verifying Hash Integrity ... crc32+ sha1+ OK

Loading fdt from FIT Image at 80010000 ...

Using 'config@1' configuration
Trying 'fdt@1' fdt subimage
Description: MIPS OpenWrt mt7621-wr1800k-ax-nand device tree blob
Type: Flat Device Tree
Compression: uncompressed
Data Start: 0x801c23a4
Data Size: 11582 Bytes = 11.3 KiB
Architecture: MIPS
Hash algo: crc32
Hash value: e1348a4d
Hash algo: sha1
Hash value: 1545970876c589c4e5952a1acf2cdd0db6c2230a
Verifying Hash Integrity ... crc32+ sha1+ OK
Booting using the fdt blob at 0x801c23a4
Uncompressing Kernel Image ... OK
Loading Device Tree to 8fe76000, end 8fe7bd3d ... OK
cat: read error: Invalid argument
cat: read error: Invalid argument
cat: read error: Invalid argument
cat: read error: Invalid argument
cat: read error: Invalid argument
ifconfig: SIOCSIFHWADDR: Address not available
ifconfig: SIOCSIFHWADDR: Address not available
cat: read error: Invalid argument
cat: read error: Invalid argument
WARNING: Variable 'lan' does not exist or is not an array/object
Please press Enter to activate this console.